Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124294dc-d843-309a-ba73-617f01b78f9d.roa
File: 124294dc-d843-309a-ba73-617f01b78f9d.roa (raw, json)
Hash identifier: lRoXvKPniY06lUdkWmhHJISHIQQ/wYoAyb1++sS47ig=
Subject key identifier: 59:DC:9C:34:67:BF:B0:DD:97:18:18:26:68:FC:97:89:2C:05:EC:3F
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA79918310AAB82701680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124294dc-d843-309a-ba73-617f01b78f9d.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 166.88.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a7:99:18:31:0a:ab:82:70:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=c0de0cf5-7dca-4da6-994b-d22f8d5e3bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:e8:16:07:d5:43:57:72:79:f1:3c:92:fb:
28:5b:86:b4:9e:1d:80:0d:cf:d8:17:84:d7:3a:91:
48:6a:a2:64:49:c1:c1:d7:31:f2:1d:49:f8:0f:ad:
fa:e6:6f:cb:37:7f:23:5f:95:a3:45:d0:42:e2:4a:
a5:0a:b7:00:e5:2d:9b:16:2f:bf:17:bc:ce:c9:41:
0a:42:a1:6b:e9:95:51:98:48:7b:fc:7f:07:93:81:
cf:e5:0f:ca:1c:20:8e:2b:ec:08:35:64:82:b4:af:
4c:5e:40:93:8f:52:c1:dd:88:6a:7d:cc:29:33:7f:
81:2f:ce:98:ce:e4:da:50:65:ac:83:8c:9d:61:06:
c6:b7:b1:63:03:e8:46:1c:77:5c:6d:e1:1c:7e:3b:
da:09:1f:a3:5c:28:23:52:7e:a0:42:ea:b9:ec:05:
73:8b:72:8d:7e:17:63:08:06:5d:00:c2:7f:7a:ba:
42:79:23:28:0e:3c:38:42:71:4d:5c:97:ec:92:57:
6d:e1:76:36:c8:48:f5:41:5a:e3:b0:c0:31:c7:cd:
f3:9a:6f:b3:05:4f:4e:24:04:7e:1d:c5:5b:e8:22:
58:3f:9d:a3:0f:8b:80:77:66:89:cd:36:2c:5f:80:
c3:8e:c1:34:14:8d:54:eb:71:43:2c:d9:3d:42:f7:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:9C:34:67:BF:B0:DD:97:18:18:26:68:FC:97:89:2C:05:EC:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/124294dc-d843-309a-ba73-617f01b78f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:77:ff:8a:e6:76:54:20:72:34:bd:8f:2a:60:9a:62:0d:78:
cc:d3:6c:bb:3f:c9:ac:c1:0a:8b:b5:56:1b:d7:de:b4:3e:1d:
d3:11:e4:40:6a:84:04:88:f2:b2:a8:14:fd:c1:a5:07:ef:a1:
c9:52:da:e5:be:e6:44:a0:86:0b:e2:8f:14:10:ff:6b:02:92:
ff:8c:6b:81:ac:32:fb:a4:55:61:8e:04:ef:ff:db:28:d9:92:
91:3f:ea:98:2a:f4:7b:cc:24:91:8c:37:fd:a4:92:c7:ee:e8:
4e:60:c8:31:8d:0a:8e:29:5c:1f:0c:c1:57:31:61:ff:13:dd:
3c:44:91:b8:94:9b:30:a5:fa:8f:84:1a:72:95:6e:85:d1:c3:
11:8b:ba:5b:0f:53:d2:70:40:aa:a8:83:2f:b8:f3:5d:1f:33:
23:0c:7e:59:78:54:97:60:c0:e5:43:ce:59:4c:9d:80:62:da:
14:61:b7:ad:53:54:aa:09:81:c3:e2:75:eb:8a:66:2a:a0:14:
a8:da:76:24:d8:42:b9:ff:1b:5f:65:06:f5:a2:d4:c6:5b:3d:
60:fc:cf:3b:44:cb:bd:d7:43:61:ef:25:3b:88:d4:f9:0f:7e:
d4:d5:de:a0:df:30:76:77:6e:ff:07:2c:d5:83:94:ca:41:55:
81:d8:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:38 2025 by rpki-client